Last Updated: April 14, 2026
1. Introduction
KidsToDo ("we", "our", "us") is a family task, learning, and reward application designed for parents and children. We are committed to protecting the privacy of all our users, especially children under 13. This Privacy Policy explains how we collect, use, and protect your information in compliance with the Children's Online Privacy Protection Act (COPPA), the General Data Protection Regulation (GDPR), and applicable laws.
2. Information We Collect
• Account Information: Name, email address (parent), and password • Child Profile: Name and optional email (created by parent only) • Task Data: Task titles, descriptions, and completion status • Media: Photos or videos submitted as task proof (stored securely) • Diary Entries: Text entries written by children for personal reflection • Learning Data: Questions attempted, answers given, accuracy, and progress • Pet Data: Virtual pet name and interaction statistics • Usage Data: Points earned, tasks completed, and app interactions
3. Device Permissions
This app may request the following device permissions: • Camera: Used by children to take photos as evidence when completing tasks assigned by parents. For example, photographing finished homework to submit for parent approval. Photos are uploaded to secure cloud storage and are only accessible by the child and their linked parent. • Photo Library: Used by children to select existing photos from their device as task submission evidence. For example, attaching a photo of a completed art project. Selected photos are uploaded to secure cloud storage. • Microphone: Used by children to record audio when completing tasks. For example, recording themselves reading aloud as a task submission. Audio files are uploaded to secure cloud storage. All media files collected through these permissions are stored securely and are only accessible to the child who created them and their linked parent account. Media files are permanently deleted when the associated account is deleted.
4. Children's Privacy (COPPA Compliance)
We take children's privacy seriously: • Child accounts can ONLY be created by a verified parent account • We require verifiable parental consent before any child data is collected • Children cannot independently create accounts • We do not collect more information than reasonably necessary • Parents can review, modify, or delete their child's data at any time • Parents can refuse further collection by deleting the child's account • We do not share children's personal information with third parties • We do not use children's data for advertising or behavioral targeting • Error monitoring (Sentry) strips all child PII before transmission
5. Parental Gate & External Content
This app is designed for the Kids category. To protect children: • All links to external websites (privacy policy, help pages, school websites) require parental verification before opening • A parental gate (math problem that young children cannot solve) must be completed before any external content is accessed • The parental gate cannot be disabled • No in-app purchases or commerce features are available without parental verification • The app does not contain any third-party advertising
6. How We Use Information
We use collected information solely to: • Provide and maintain the app's core functionality • Enable task assignment, submission, and approval between parent and child • Track points and virtual pet progress • Store diary entries for the child's personal reflection • Provide adaptive learning content matched to the child's level • Generate weekly learning reports for parents
7. Data Storage & Security
Your data is stored securely using Supabase, a trusted cloud platform with: • Row Level Security (RLS) ensuring users only access their own data • Encrypted data transmission (HTTPS/TLS) • Secure authentication with hashed passwords • Media files stored in access-controlled storage buckets • No sensitive data stored on device (all synced to cloud)
8. Data Sharing
We do NOT: • Sell personal information to third parties • Share data with advertisers • Use third-party analytics or tracking SDKs • Display third-party advertisements Data is only shared between parent and child within the same family group.
9. Parental Rights
Parents have the right to: • Review all data collected from their child • Request deletion of their child's account and all associated data • Refuse further data collection by removing the child's account • Contact us regarding their child's information To exercise these rights, use the "Delete Account" option in Settings or contact us at privacy@kidstodo.vip.
10. Data Retention & Deletion
• Data is retained only while the account is active • When an account is deleted, all associated data is permanently removed • This includes: profile data, tasks, submissions, media files, diary entries, learning history, pet data, and points history
11. Third-Party Services
We use the following service providers: • Supabase (database, authentication, file storage) — supabase.com/privacy • Sentry (error monitoring, child PII stripped) — sentry.io/privacy No other third-party services collect user data in this app.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of significant changes through the app. Continued use of the app after changes constitutes acceptance of the updated policy.
13. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at: Email: privacy@kidstodo.vip Subject: Privacy Inquiry